This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/oqSpojL2gvSR2QcLL4KFm0V4HWY.roa File: oqSpojL2gvSR2QcLL4KFm0V4HWY.roa (raw, json) Hash identifier: FGRxNjHOyElpFwbAYx4V+mGIafQFaKt4LA9c4xccdQM= Subject key identifier: A2:A4:A9:A2:32:F6:82:F4:91:D9:07:0B:2F:82:85:9B:45:78:1D:66 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A274FC37F75241C98BEE9EFFDC5184 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/oqSpojL2gvSR2QcLL4KFm0V4HWY.roa Signing time: Thu 01 Jan 2026 08:17:51 +0000 ROA not before: Thu 01 Jan 2026 08:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11404 IP address blocks: 103.216.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:74:fc:37:f7:52:41:c9:8b:ee:9e:ff:dc:51:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2a4a9a232f682f491d9070b2f82859b45781d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:5c:ef:ed:ae:9b:56:41:f3:d1:4b:9a:b9: e2:dd:17:6f:fb:d4:a7:d5:1c:0b:54:73:4e:91:99: 07:dd:08:66:81:c7:d2:d1:af:a2:a2:0f:ee:1b:91: 7e:c4:b6:fa:86:31:bc:34:cd:e2:0f:ff:3b:32:70: 3c:6c:11:ab:3a:85:ad:3f:e6:e5:71:0f:de:e3:0c: b3:fa:a9:f7:0c:a6:5f:65:b8:d2:c6:95:e5:e7:f0: 92:54:42:92:38:d8:81:7f:2f:81:83:e9:d9:31:65: 25:df:78:ee:7e:0a:d3:01:80:ad:bc:d4:0d:61:19: 6f:85:6c:07:d8:2e:34:4b:f4:3f:a3:f8:e4:8c:ee: 3f:28:8d:44:29:8f:ef:92:84:59:7e:5a:fc:52:fa: 1a:6b:5e:a0:36:e3:a4:cc:66:07:dd:fb:98:76:4d: aa:ba:ea:b5:8d:de:e1:2a:10:41:f7:6b:3f:44:74: 6f:a4:16:1b:4b:4a:b2:2a:8e:db:80:54:1a:3b:b6: 6e:b1:6c:dc:9e:02:56:d7:b1:b7:c2:93:86:04:91: 86:a5:c7:5e:0a:03:a3:c4:8c:5f:e2:32:74:b3:63: 7e:55:8d:f0:e9:64:f0:81:db:8a:13:7d:61:26:76: 20:11:fc:ab:af:1d:02:a9:7e:55:27:0a:e6:fe:66: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:A9:A2:32:F6:82:F4:91:D9:07:0B:2F:82:85:9B:45:78:1D:66 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/oqSpojL2gvSR2QcLL4KFm0V4HWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.196.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:16:f7:82:8a:0f:21:73:40:a5:06:05:7f:c7:89:70:04:57: 79:e0:40:55:18:a1:9d:ee:bf:cf:d5:9f:8c:87:15:8e:8b:2d: b4:45:75:82:c5:2b:04:58:f1:72:8d:ba:7c:44:29:19:32:26: f7:b2:12:53:e9:88:e3:50:f7:79:23:08:9e:b7:3d:9a:85:aa: 76:71:4c:58:23:0a:cd:b5:51:9b:65:c8:fc:68:8a:7d:ab:ef: 34:b1:4f:cf:6f:e3:2a:38:82:ce:4b:05:a7:96:ec:e5:c2:c8: e5:1b:43:95:ba:c0:f5:49:ef:8e:39:34:43:7a:05:2b:63:c8: 9b:a8:d1:4c:07:8a:83:c2:94:a5:25:f5:f6:22:32:2e:e9:69: 45:22:e8:7b:1b:99:77:87:dd:57:9d:32:4d:0b:43:bf:10:de: e7:e2:ee:08:68:5e:e2:05:d2:f9:33:08:3b:6e:dc:6e:0e:47: e8:ed:d6:a8:cc:d1:ec:91:b8:95:65:2c:3b:a6:e5:a2:12:84: cc:09:4f:27:88:de:ce:92:3e:50:5d:db:92:e8:e8:db:a7:29: b5:50:9c:c1:5b:e0:eb:22:f0:fd:80:65:67:52:f0:06:70:51: 5a:9d:ac:f7:49:9b:59:d4:34:b2:2d:a3:ec:71:ba:5d:3a:b1: f9:23:62:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4onT8N/dSQcmL7p7/3FGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmE0YTlhMjMyZjY4MmY0OTFkOTA3MGIyZjgyODU5YjQ1NzgxZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzspc7+2um1ZB89FLmrni3Rdv+9Sn 1RwLVHNOkZkH3QhmgcfS0a+iog/uG5F+xLb6hjG8NM3iD/87MnA8bBGrOoWtP+bl cQ/e4wyz+qn3DKZfZbjSxpXl5/CSVEKSONiBfy+Bg+nZMWUl33jufgrTAYCtvNQN YRlvhWwH2C40S/Q/o/jkjO4/KI1EKY/vkoRZflr8Uvoaa16gNuOkzGYH3fuYdk2q uuq1jd7hKhBB92s/RHRvpBYbS0qyKo7bgFQaO7ZusWzcngJW17G3wpOGBJGGpcde CgOjxIxf4jJ0s2N+VY3w6WTwgduKE31hJnYgEfyrrx0CqX5VJwrm/mZa2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKkqaIy9oL0kdkHCy+ChZtFeB1mMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvb3FTcG9qTDJndlNSMlFjTEw0S0ZtMFY0SFdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9jEMA0G CSqGSIb3DQEBCwUAA4IBAQA/FveCig8hc0ClBgV/x4lwBFd54EBVGKGd7r/P1Z+M hxWOiy20RXWCxSsEWPFyjbp8RCkZMib3shJT6YjjUPd5Iwietz2ahap2cUxYIwrN tVGbZcj8aIp9q+80sU/Pb+MqOILOSwWnluzlwsjlG0OVusD1Se+OOTRDegUrY8ib qNFMB4qDwpSlJfX2IjIu6WlFIuh7G5l3h91XnTJNC0O/EN7n4u4IaF7iBdL5Mwg7 btxuDkfo7daozNHskbiVZSw7puWiEoTMCU8niN7Okj5QXduS6Ojbpym1UJzBW+Dr IvD9gGVnUvAGcFFanaz3SZtZ1DSyLaPscbpdOrH5I2I4 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:18 2026 by rpki-client